CA BrightStor ARCserve Backup caloggerd Arbitrary File Writing Vulnerability
ZDI-08-027: May 19th, 2008CVE ID
Affected Vendors
Affected Products
Vulnerability Details
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Computer Associates ARCserve Backup. Authentication is not required exploit this vulnerability.
The specific flaw exists within the caloggerd log daemon during the processing of log messages that contain directory traversal modifiers. A lack of sanity checking on the provided path allows attackers to append arbitrary data to a file of their choosing and can easily result in a full system compromise.
Vendor Response
Computer Associates has issued an update to correct this vulnerability. More details can be found at:Disclosure Timeline
-
2006-09-12 - Vulnerability reported to vendor
2008-05-19 - Coordinated public release of advisory
Credit
This vulnerability was discovered by:-
Damian Put <pucik@overflow.pl>
